UBUNTU-CVE-2017-17044

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service infinite loop and host OS hang by leveraging the mishandling of Populate on Demand PoD errors...

ROOT xrootd Command Injection Vulnerability

ROOT xrootd is a scalable data repository that features fault-tolerant access and low-latency access. A command injection vulnerability exists in ROOT xrootd 4.6.0 and earlier versions. A remote attacker can exploit this vulnerability to execute commands...

DEBIAN-CVE-2017-12608

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service memory corruption and application crash potentially resulting in arbitrary code execution...

HPESBHF03798 rev.1 - HPE Proliant Gen10 Servers, DL20 Gen9, ML30 Gen9 and Certain Apollo Servers Using Intel Server Platform Service (SPS) v4.0, Local Denial of Service and Execution of Arbitrary Code

Potential Security Impact: Local: Denial of Service DoS, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System ROM firmware prior to v1.26 HPE Apollo 4510 System ROM firmware prior to v1.26 HPE Apollo 6000 DLC System ROM firmware prior ...

SAP Business Intelligence Promotion Management Application Security Bypass Vulnerability

SAP Business Intellignece BI is a set of business intelligence software from SAP, which provides report query, data analysis, data mining, data backup and recovery, etc. Promotion Management Application Enterprise is one of the enterprise promotion Management Application Enterprise is one of the...

SAP Business Objects Platform Enterprise Denial of Service Vulnerability

SAP Business Objects Platform Enterprise is the enterprise version of a suite of business intelligence software and enterprise performance management platform from SAP, Germany. The program provides reporting, performance management and data base and other functions. A denial of service...

MultiTech FaxFinder Trust Management Vulnerability

MultiTech FaxFinder is a fax server appliance from MultiTech Systems, USA. A security vulnerability exists in versions of MultiTech FaxFinder prior to 4.1.2. A remote attacker can exploit the vulnerability to retrieve certificates...

Linux kernel local denial of service vulnerability (CNVD-2017-33484)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/media/usb/dvb-usb/dib0700devices.c file in Linux kernel 4.13.11 and earlier versions. A local attacker ca...

DEBIAN-CVE-2017-16527

sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service sndusbmixerinterrupt use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...

PHPOK V4.8 [20171023] suffers from an arbitrary reinstallation vulnerability

PHPOK is an enterprise building system. PHPOK V4.8 20171023 suffers from an arbitrary reinstallation vulnerability. The vulnerability is caused by the program not filtering the installation script, an attacker can exploit the vulnerability to cause the program to reinstall...

Ignite Realtime Openfire Cross-Site Scripting Vulnerability

Openfire is a cross-platform real-time collaboration server based on the XMPP Jabber protocol. A cross-site scripting vulnerability exists in the administration console in Ignite Realtime Openfire server versions prior to 4.1.7. An attacker can execute arbitrary JavaScript code on the victim clie...

The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE allows a attacker to execute arbitrary code with administrator privileges, or to cause a service failure and system reboot.

The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE systems is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a Denial-of-Service attack DoS, along with a system reboot, using a specially crafted DHCPv...

IrfanView buffer overflow vulnerability (CNVD-2017-32313)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. The vulnerability can be exploited by...

IrfanView BabaCAD4Image plugin buffer overflow vulnerability (CNVD-2017-32369)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. BabaCAD4Image plugin is one of the plugins for reading DXF and DWG CAD files. A buffer overflow vulnerability exis...

IrfanView buffer overflow vulnerability (CNVD-2017-32312)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. A remote attacker can exploit this...

IrfanView Buffer Overflow Vulnerability (CNVD-2017-32310)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. The vulnerability can be exploited by...

kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inetdiagmsgsctp,laddrfill and sctpgetsctpinfo functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic...

IrfanView buffer overflow vulnerability (CNVD-2017-30373)

IrfanView is a Bosnia and Herzegovina software developer Irfan Skiljan developed a picture viewer, which supports image browsing, image editing, image format conversion, etc. PDF plugin is one of the PDF document reading plug-ins. IrfanView 4.44 32-bit in the PDF plugin version 4.43 there is a...

dotCMS Stored Cross-Site Scripting Vulnerability

dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in the vanity-urls Title field in dotCMS version 4.1.1, which originat...

OpenText Document Sciences xPression Directory Traversal Vulnerability

OpenText Document Sciences xPression formerly known as EMC Document Sciences xPression is a document output management and customer communication solution from OpenText Canada. The solution integrates an organization's Customer Relationship Management CRM, Enterprise Content Management ECM, and...